ESW, an ecommerce technology platform, announced on July 21 that its new Agentic Commerce system will integrate with Microsoft Copilot, giving the AI assistant the ability to handle product discovery, cart building, and secure payment processing — all inside the chat window. The move, first reported in a Practical Ecommerce roundup on July 29, signals a fundamental shift in how AI assistants interact with retail: they’re no longer just recommendation engines, but full-fledged transaction surfaces. For the millions of Windows users who already rely on Copilot, that means shopping could soon feel like having a conversation that ends with a purchase, not a redirect to a browser tab.

AI Shopping That Closes the Deal

Behind the change is ESW’s Agentic Commerce platform, designed to work alongside a merchant’s existing ecommerce infrastructure rather than replace it. When a shopper asks Copilot for a product recommendation, the assistant can now pull from a brand’s catalog, present options, and — once the user decides — process the payment without ever handing off to a traditional storefront. The transaction remains within the AI experience, which ESW says reduces friction between discovery and checkout. Microsoft Copilot is the first integration, though ESW plans to expand to other AI platforms over time.

This isn’t the only sign that commerce is moving inside AI assistants. Shoppable, a commerce infrastructure provider, has launched a Universal Checkout plugin for ChatGPT, now available in the newly renamed Plugin Directory (formerly the App Directory, as of July 9). Like ESW, Shoppable’s plugin aims to let users build multi-retailer carts and check out in one flow, giving brands a single backend connection rather than bespoke integrations for each AI platform.

Meanwhile, the security layer required to make all this safe is also taking shape. Fastly, a cloud platform, has partnered with Experian’s Agent Trust ecosystem to help enterprises verify AI agent identity, delegated authority, intent, and payment credentials before any transaction hits backend systems. In short, when an AI assistant tries to spend your money, there needs to be a way to confirm it’s really you — and that the assistant hasn’t been hijacked.

The shift isn’t limited to checkout. Algolia released Dynamic Facets on July 21, using AI to automatically prioritize search filters based on what a shopper is looking for, while Miva’s 26R2 update, also dated July 21, lets merchants build merchandising showcases from AI prompts and apply boosting rules. These aren’t checkout features per se, but they show how AI is being embedded deeper into the discovery and selection processes — steps that naturally lead to purchase decisions.

Key developments this week:

  • ESW Agentic Commerce with Microsoft Copilot (announced July 21)
  • Shoppable Universal Checkout plugin for ChatGPT (available now)
  • Fastly joins Experian Agent Trust for AI commerce (disclosed July 29)
  • Algolia Dynamic Facets (released July 21)
  • Miva 26R2 with AI-driven merchandising (released July 21)

Who This Affects — and How

For the everyday Windows user, the immediate impact is convenience. If you already use Copilot to ask questions or draft emails, you might soon be able to say, “Find me a decent pair of running shoes under $100 and order them,” and the assistant will handle the rest. No more juggling tabs, copying discount codes, or resetting passwords. But that seamlessness comes with new questions about privacy, security, and control. When an AI assistant has your payment details and can authorize charges, you’ll want to be absolutely certain it’s acting on your direct command, not on a misinterpreted prompt or a malicious injection. Since Copilot is deeply integrated into Windows 11 and Edge, the risk of accidental voice-activation or phishing attacks that trick the assistant into spending money becomes a concern worth watching.

IT administrators face a different set of challenges. The July 9 rebranding of ChatGPT’s App Directory to the Plugin Directory signals that more tools — including commerce plugins — are coming, and workspace admins will need to manage what gets installed and who can use them. If your organization uses Microsoft 365 with Copilot, similar controls will likely emerge. An employee shopping for office supplies via Copilot might be convenient, but it also opens the door to unauthorized spending, non-compliant vendors, or data leaks. Admins should start thinking about policies that govern AI-driven purchases now, before the feature becomes widespread. Expect group policy or MDM settings that can block or whitelist certain commerce integrations.

For merchants and developers, the opportunity is clear — but so are the risks. Plugging a catalog into Agentic Commerce or a Universal Checkout MCP server sounds straightforward, but it demands accurate, well-structured product data. If your inventory says an item is in stock when it’s not, or your pricing is outdated, the AI will happily sell it anyway, leading to customer service nightmares. Payment processing needs to be bulletproof, fraud detection must be able to distinguish a legitimate delegated transaction from account takeover, and order management systems must accept and process AI-originated orders as cleanly as those from your website. ESW says its platform works alongside existing systems, but that integration still requires testing and care.

The Road to AI Checkout

The path here has been remarkably fast. Barely three years ago, the idea of an AI assistant that could not only understand a shopping request but actually complete the transaction seemed like science fiction. But the launch of ChatGPT in late 2022 and its subsequent plugin ecosystem turned natural-language instructions into actions. By early 2026, companies were experimenting with AI agents that could book flights, manage calendars, and even negotiate deals. Commerce was the logical next step.

Microsoft, for its part, has been weaving Copilot deep into Windows 11 and Edge, positioning it as a universal interface for work and productivity. Adding transactional capabilities fits that vision perfectly: if Copilot can write a report, it should be able to order the supplies needed to print it. ESW saw the opportunity to bridge the gap, and its July 21 announcement confirms that the technology is ready to go — at least for pilot programs.

The July 29 Practical Ecommerce roundup, which first tied all these threads together, reveals a broader ecosystem in motion. Shoppable’s ChatGPT plugin is live now. Fastly and Experian are building the trust layer. Algolia and Miva are refining how shoppers find products within AI-driven interfaces. The pieces are falling into place.

What to Do Before AI Starts Spending Your Money

If this sounds like a future you’re not quite ready for, there are a few concrete steps you can take.

For consumers: When shopping through any AI assistant, pay close attention to the permissions you grant. In ChatGPT, plugins must be explicitly enabled, and each one will outline what data it can access. The same will likely be true for Copilot integrations. Only install plugins from trusted developers, and if an assistant ever asks for your payment credentials outside a secure, recognizable checkout flow — stop. Look for visible indicators that the transaction is encrypted and that the seller is legitimate. Also, consider enabling purchase notifications on your credit cards so you’ll instantly see any unexpected charges. When using voice commands with Copilot, double-check the transcribed request before confirming.

For IT administrators: If your organization uses Microsoft 365 or deploys Windows devices with Copilot enabled, now is the time to review your policies around AI-assisted actions. Check whether your tenant allows third-party integrations with Copilot (once available) and plan to treat commerce plugins with the same scrutiny as any app that can spend company money. Use group policies or MDM solutions to block or restrict such plugins until you’ve vetted them. Establish an approval process and ensure that any transactions initiated through an AI assistant generate clear audit logs. Monitor announcements from Microsoft about Copilot plugin management; the July 9 Plugin Directory rename is a model for how these ecosystems will be governed.

For merchants: Reach out to ESW, Shoppable, or similar providers to understand what integration looks like for your existing platform. Start by auditing your product catalog: are descriptions correct, prices up to date, inventory synced in real time? Then work with your payment processor to understand how AI-originated transactions will appear — you may need to adjust fraud rules to avoid false declines. Finally, test the checkout flow yourself before going live. A sale lost because the AI couldn’t connect to your inventory system is a sale lost forever. Consider using sandbox environments like Basic 3PL’s GO on Shopline (also launched this week) to simulate fulfillment before committing real orders.

A More Conversational Storefront Is Inevitable

Agentic commerce isn’t a fad. It’s the logical endpoint of a decade-long trend toward making online shopping faster and more intuitive. Voice shopping fizzled because it lacked the context and flexibility of a conversation, but today’s large language models can understand nuance, compare options, and remember user preferences in ways Alexa never could. With the infrastructure layer now catching up, expect Google, Amazon, and Apple to follow Microsoft’s lead.

The real winners, however, won’t be determined by the shiniest AI interface. They’ll be the merchants who keep their back-end operations — warehouse, inventory, payments, fraud — in perfect sync. For Windows users and IT managers, the best defense is staying informed, asking the right questions, and never underestimating how much trust we’re about to place in a chatbot.